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Further Clarification Requested by States Around the Application of FERPA 
To State Longitudinal Data Systems 

Statewide Longitudinai Data Systems (SLDS) provide the information and toois needed to inform 
poiicies, practices and decisions at every ievei to improve student achievement and system 
performance, it is equaiiy important that there are poiicies and practices to protect personaiiy 
identifiabie information and to ensure the confidentiaiity and security of this sensitive information. 
Linking iimited data eiements from different sectors is sometimes necessary to generate actionabie 
information that can be used to reaiize efficiency, assess impact, and make informed decisions about 
education. States must take deiiberate and thoughtfui action to prioritize privacy and security based on 
generaiiy agreed upon practices and safeguards for sharing and protecting personaiiy identifiabie 
information whiie they are improving their SLDSs to provide better information to stakehoiders 
throughout the P-20/Workforce systems. As states buiid data-informed education sectors, they have 
consistentiy asked for ciarification from the federai government around the appiication of the Famiiy 
Educationai Rights and Privacy Act (FERPA) to these data systems. 

Some states have been abie to successfuiiy iink and share key information across their P-20/Workforce 
systems given their governance structure and iegai interpretation of FERPA's appiication. As a resuit, 
these states are better poised to understand and deveiop effective soiutions to criticai poiicy issues iike 
schooi readiness, coiiege remediation, and workforce productivity. Flowever, the provision of piecemeai 
guidance by the U.S. Department of Education in response to specific questions raised by states based 
on interpretations of this 1974 iaw has forced many states to continue to spend scarce resources of 
time, energy and money to seek ciarification on FERPA's appiication in their state. 

Based on state experiences, comments, and ongoing conversations, the Data Quaiity Campaign (DQC) 
Partners have identified the foiiowing four areas of continuing confusion: 

Issue 1: Sharing between Separate P-(or K-)12 and Postsecondary Data Systems The preamble to the 
FERPA regulations suggests that disclosures for evaluation are limited to evaluations of programs of the 
disclosing agency, a position that seems inconsistent with the statute. States need confirmation that 
limited, pertinent student information can be connected from K-12 to postsecondary and back to 
provide vital two-way feedback on student preparation for success and on alignment of systems and 
expectations. In particular, without this clarification, states will be prevented from implementing 
mandates in the American Recovery and Reinvestment Act (ARRA) to measure the effectiveness of LEAs 
and secondary schools in preparing students for college and careers. 

Issue 2: Disclosures to a Former School/LEA for Evaluation and Accountability States need clarity on 
the ability of postsecondary institutions, or data systems acting on their behalf, to disclose education 
records to a student's former school or LEA for the purpose of evaluating the school or LEA or holding it 
accountable based in part on the performance of its former students. States need the ability to evaluate 
how well the district or school prepared its students for college and to evaluate the effectiveness of 
different schools, courses, and preparation approaches. While student level identifiable data is required 
in order to link the data across systems, only a limited number of system managers need to have access 
to personally identifiable information during the matching process. The majority of stakeholders of the 
linked data can gain value in its analysis and use without necessarily requiring use of personally 
identifiable data. 
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Issue 3: Research Studies Initiated by State Agencies States need clarification that state education 
agencies (not just schools - including postsecondary institutions - or local educational agencies (LEAs)) 
are able to enter into agreements with and disclose education records to research organizations for 
studies to improve instruction, on behalf of schools and LEAs in their state, subject to safeguards in the 
agreements to protect the confidentiality of the records. This research allows states to use statewide 
data to strategically answer the priority questions in their state as deemed necessary by a state 
governing body working in partnership with other stakeholders, including districts and schools. 

Issue 4: Disclosures to Workforce and Social Service Agencies States need clarification regarding 
whether FERPA authorizes disclosures of student education records, consistent with state law, to 
employment and social service agencies responsible for serving students or former students, or for 
maintaining records for them, for the purposes of evaluating and strengthening their services, 
evaluating education programs, and enhancing collaboration between education, workforce, and social 
service agencies in serving students. 

These issues demonstrate the lingering uncertainty that exists regarding with whom data can be shared, 
by whom, and for what purpose. There is an opportunity to work with Congress and the Administration 
to address this confusion in upcoming guidance, regulation and/or statutory changes. Over the next few 
months the DQC Partners will work with state policymakers to ensure that privacy and security, 
including better understanding and application of Fair Information Practice Principles and other best 
practices, are an integral part of their strategies to build SLDSs in their states. 


For more information on how FERPA applies to state data systems, read Maximizinp the Power of 
Education Data While Ensuring Compliance with Federal Student Privacy Laws: A Guide for Policymakers, 
and for specific recommendations on how to provide clarification to the listed issues, read the DQC's 
publication Needed Changes in FERPA Not Addressed in Final Regulations . 

For more resources on how states are linking and sharing data while protecting personally identifiable 
information and ensuring the confidentiality and security of this sensitive information, visit 
www.DataQualityCampaign.org/resources/topics/13 . 

For more information on the generally accepted Fair Information Practice Principles, visit 
www.ftc.gov/reports/privacy3/fairinfo.shtm. 




